RE: [WIRELESS-LAN] WLC & ISE combo issues

2019-10-10 Thread Mathieu Sturm
Onderwerp: Re: [WIRELESS-LAN] WLC & ISE combo issues I’m sure you’re aware but you should skip 2.3 (super buggy) and go to 2.4, but the policy set UI has totally changed and in my opinion, is much, much harder to navigate than 2.2. That’s the only reason I’m holding off from upgrading

Re: [WIRELESS-LAN] WLC & ISE combo issues

2019-10-10 Thread Heavrin, Lynn
Group Listserv on behalf of Mathieu Sturm Reply-To: The EDUCAUSE Wireless Issues Community Group Listserv Date: Thursday, October 10, 2019 at 3:14 AM To: "WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU" Subject: Re: [WIRELESS-LAN] WLC & ISE combo issues Thinking on going to latest ISE versi

RE: [WIRELESS-LAN] WLC & ISE combo issues

2019-10-10 Thread Mathieu Sturm
Onderwerp: Re: [WIRELESS-LAN] WLC & ISE combo issues Hi, Have you had a look at the AAA server statistics, will list number of auth requests, passes, fails, timeout etc.. example output below, may help focus the investigation. Of course a ‘debug client ’ always helps Example output: (w

RE: [WIRELESS-LAN] WLC & ISE combo issues

2019-10-10 Thread Mathieu Sturm
Yes Van: The EDUCAUSE Wireless Issues Community Group Listserv Namens Jonathan Oakden Verzonden: donderdag 10 oktober 2019 10:25 Aan: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Onderwerp: Re: [WIRELESS-LAN] WLC & ISE combo issues Are you using PEAP/MSCHAP? From: The EDUCAUSE Wireless Issues Commu

Re: [WIRELESS-LAN] WLC & ISE combo issues

2019-10-10 Thread Jonathan Oakden
S-LAN] WLC & ISE combo issues Hello, since the start of the new academic year we’ve been having some troubles with our Cisco setup. We have 3 Cisco WLC 5520’s (one of these is standby), around 850ap’s and 5 Cisco ISE’s (1 admin node, 1 monitor node and 3 radius-only nodes). We have this se

RE: [WIRELESS-LAN] WLC & ISE combo issues

2019-10-10 Thread Mathieu Sturm
: [WIRELESS-LAN] WLC & ISE combo issues We have the same 5441 messages and we are on 8.5.135.0 and ISE 2.2 patch 12. I don’t have any evidence it’s service impacting but it is annoying. You need to upgrade from patch 5 to address some serious bug and vulnerabilities. Patch 15 is out. We

Re: [WIRELESS-LAN] WLC & ISE combo issues

2019-10-10 Thread Carlo Terminiello
ply-To: The EDUCAUSE Wireless Issues Community Group Listserv Date: Wednesday, 9 October 2019 at 08:11 To: Subject: Re: [WIRELESS-LAN] WLC & ISE combo issues The WLC is on version 8.3.140.0 (we still have 2600 series AP’s that we need to replace so we are pretty limited) and ISE is 2.2 (patch 5).

RE: [WIRELESS-LAN] WLC & ISE combo issues

2019-10-10 Thread Mathieu Sturm
There is a 8.5 MR5 since June. Any known major issues on that? Van: The EDUCAUSE Wireless Issues Community Group Listserv Namens Kitri Waterman Verzonden: woensdag 9 oktober 2019 17:17 Aan: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Onderwerp: Re: [WIRELESS-LAN] WLC & ISE combo issues 8.3.x? Or 8

RE: [WIRELESS-LAN] WLC & ISE combo issues

2019-10-10 Thread Mathieu Sturm
Verzonden: woensdag 9 oktober 2019 15:20 Aan: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Onderwerp: Re: [WIRELESS-LAN] WLC & ISE combo issues Is this a new deployment or do you have more users this year than last year? It could be load related. That 5441 error log indicates there are queued RADIUS pac

Re: [WIRELESS-LAN] WLC & ISE combo issues

2019-10-09 Thread Heavrin, Lynn
ubject: Re: [WIRELESS-LAN] WLC & ISE combo issues 8.3.x? Or 8.5.x? 8.5 will support AP2600’s. We’re currently at 8.5.140.0 (we still have AP3500’s to support…) and it’s been fairly stable for AireOS. 8.3 also has some escalation fixes: https://www.cisco.com/c/en/us/support/docs/wireles

Re: [WIRELESS-LAN] WLC & ISE combo issues

2019-10-09 Thread Kitri Waterman
, October 8, 2019 at 11:11 PM To: "WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU" Subject: Re: [WIRELESS-LAN] WLC & ISE combo issues The WLC is on version 8.3.140.0 (we still have 2600 series AP’s that we need to replace so we are pretty limited) and ISE is 2.2 (patch 5). Van: The EDUCAUSE W

RE: [WIRELESS-LAN] WLC & ISE combo issues

2019-10-09 Thread Dennis Xu
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] WLC & ISE combo issues Hi Mathieu, One thing you might want to verify is that the RADIUS timeout values match in both the WLCs and in ISE. If these values differ, you may end up in a situation like this where one side give

Re: [WIRELESS-LAN] WLC & ISE combo issues

2019-10-09 Thread Kenny, Eric
Hi Mathieu, One thing you might want to verify is that the RADIUS timeout values match in both the WLCs and in ISE. If these values differ, you may end up in a situation like this where one side gives up and the other side is not aware. --- Eric Kenny Network

RE: WLC & ISE combo issues

2019-10-09 Thread Mathieu Sturm
@LISTSERV.EDUCAUSE.EDU Onderwerp: Re: [WIRELESS-LAN] WLC & ISE combo issues What version of core on the WLC / what model of AP? We had an issue at the start of the year with version of code on cisco 3500 series AP where clients would successful authenticate with the AP, but the association would never

RE: WLC & ISE combo issues

2019-10-08 Thread Letts, Richard J
Sent: Tuesday, October 8, 2019 2:50 PM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: [WIRELESS-LAN] WLC & ISE combo issues Hello, since the start of the new academic year we've been having some troubles with our Cisco setup. We have 3 Cisco WLC 5520's (one of these is standby), around 850

Re: [WIRELESS-LAN] WLC & ISE combo issues

2019-10-08 Thread Christina Klam
Princeton, NJ 08540 +1 609-734-8154 ck...@ias.edu From: "Mathieu Sturm" To: "The EDUCAUSE Wireless Issues Community Group Listserv" Sent: Tuesday, October 8, 2019 2:50:13 PM Subject: [WIRELESS-LAN] WLC & ISE combo issues Hello, since the start of the new academi

WLC & ISE combo issues

2019-10-08 Thread Mathieu Sturm
Hello, since the start of the new academic year we've been having some troubles with our Cisco setup. We have 3 Cisco WLC 5520's (one of these is standby), around 850ap's and 5 Cisco ISE's (1 admin node, 1 monitor node and 3 radius-only nodes). We have this setup since 2018. There were some